VULNERABILITY INTELLIGENCE

CVE-2025-52449

CVSS score8.5 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-07-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references